$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json) Hash identifier: SVzxwBDJS5oP6h0GZquRnJ1eWx/BSwXoHxMjcEBgsOs= Subject key identifier: DA:7A:5A:2E:72:34:E9:BF:C9:2B:73:92:EE:4A:4D:79:03:EC:BF:05 Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Certificate serial: 0A64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft Manifest number: 0A5A Signing time: Wed 22 Jul 2026 20:04:28 +0000 Manifest this update: Wed 22 Jul 2026 20:04:28 +0000 Manifest next update: Wed 29 Jul 2026 20:04:28 +0000 Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: RNFpLPR3s2Rl+NIjsFiDqB8ksZW3Zt+JSHVoUfNmmJ8=) 2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: CgnP+/rSHkkonAvFRbYmCY32JDnrx7tAgsh6bxIXNeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2660 (0xa64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Validity Not Before: Jul 22 20:04:28 2026 GMT Not After : Jul 29 20:04:28 2026 GMT Subject: CN=6a61224c-0e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:6a:83:95:39:9b:2c:99:f9:77:ec:ff:c4: 31:c6:37:dc:cc:f9:6e:21:b7:8d:91:0f:57:d9:03: 0d:f4:d3:95:43:29:f5:d0:23:ee:d4:99:d3:4f:86: 03:26:cd:9d:44:3e:64:e9:ec:34:a8:48:8c:9b:72: 4c:9f:bb:2a:ec:da:3d:7e:9f:c3:7c:fc:10:14:59: f7:39:af:f3:70:00:84:ec:15:a5:42:a3:24:f9:66: 4c:c1:dc:ca:b4:ad:29:b3:8d:61:94:89:bb:e4:49: b5:60:5f:62:d6:35:c3:c6:de:b8:59:f9:f4:0f:de: 24:53:a7:69:01:a9:b5:e3:11:7d:9a:ae:d8:1f:a8: aa:3d:3d:d6:4a:a9:82:f4:58:6d:a5:b3:a9:12:88: 4b:e6:fd:2c:6e:cf:95:38:d1:2e:7c:40:8a:de:ae: d8:b4:96:6d:97:0e:3a:bc:69:bb:e8:36:d1:86:77: 50:c3:90:d4:1a:cf:0c:51:86:32:5e:91:b2:ba:de: fd:ab:a6:54:da:2d:e2:0f:2e:1a:b0:96:79:d8:60: 2b:c5:8c:ac:55:12:8a:25:af:08:ce:4b:34:5c:8e: c7:ee:f5:84:ed:64:49:23:c3:11:d7:f6:92:16:04: fc:33:3a:6b:16:47:0f:c8:83:1d:26:59:0d:8f:d6: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7A:5A:2E:72:34:E9:BF:C9:2B:73:92:EE:4A:4D:79:03:EC:BF:05 X509v3 Authority Key Identifier: keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5c:9b:9d:36:5f:4d:02:0a:bc:82:2e:45:38:98:d4:e9:85: c8:fc:dc:63:ea:bf:8f:b4:32:69:ea:ce:9c:55:a7:8d:89:ef: 82:04:ba:b4:2f:67:af:c6:50:a0:87:c9:e5:d1:3d:2c:a5:09: c2:cb:9a:dd:8f:3f:78:74:79:8f:97:4e:9f:93:51:e7:37:02: ea:31:d9:a4:8c:1b:6f:69:e9:8a:cd:1b:b4:5e:e7:37:c9:33: 68:d9:4c:f5:3e:97:ed:d9:9a:a6:3a:d5:21:7e:4b:e2:73:e1: 92:0b:05:98:cf:80:a3:37:da:96:22:3a:20:8c:d2:3c:c9:58: fe:a7:ee:47:04:3b:9f:40:ef:e3:73:cc:b9:a0:d6:2c:e4:1f: 10:4f:22:95:d8:68:34:a0:89:03:f5:0e:16:40:95:07:4a:e9: d5:35:b9:a7:1e:c9:1c:3e:93:f0:77:3d:9b:4f:19:c8:c7:f7: 19:0b:a7:89:b4:ed:54:8e:b4:51:79:d7:ad:43:01:89:87:4c: 33:60:0a:54:93:4e:63:89:a8:59:31:01:c2:ae:53:48:45:a2: e1:d5:45:e9:c1:82:34:ae:22:24:80:27:12:bc:88:a6:aa:66: df:49:b4:b9:89:91:06:c4:6c:a8:67:63:f4:b5:b9:34:0d:0d: 85:3c:65:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERTAxMTAvBgNVBAUTKDdGQzI0NThDODZFMjVDOTM0NUEwODUyQ0IyN0VCMTcy NzdGQjgxQTMwHhcNMjYwNzIyMjAwNDI4WhcNMjYwNzI5MjAwNDI4WjAYMRYwFAYD VQQDEw02YTYxMjI0Yy0wZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qBqg5U5myyZ+Xfs/8QxxjfczPluIbeNkQ9X2QMN9NOVQyn10CPu1JnTT4YD Js2dRD5k6ew0qEiMm3JMn7sq7No9fp/DfPwQFFn3Oa/zcACE7BWlQqMk+WZMwdzK tK0ps41hlIm75Em1YF9i1jXDxt64Wfn0D94kU6dpAam14xF9mq7YH6iqPT3WSqmC 9FhtpbOpEohL5v0sbs+VONEufECK3q7YtJZtlw46vGm76DbRhndQw5DUGs8MUYYy XpGyut79q6ZU2i3iDy4asJZ52GArxYysVRKKJa8Izks0XI7H7vWE7WRJI8MR1/aS FgT8MzprFkcPyIMdJlkNj9Z4pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNp6Wi5y NOm/yStzku5KTXkD7L8FMB8GA1UdIwQYMBaAFH/CRYyG4lyTRaCFLLJ+sXJ3+4Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURFMC81OUNBNjY2RThG NjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhKTkZvSVVzc242eGNuZjdn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4SkZqSWJpWEpORm9JVXNzbjZ4Y25mN2dhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURFMC81OUNBNjY2RThGNjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhK TkZvSVVzc242eGNuZjdnYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAflybnTZfTQIKvIIuRTiY1OmFyPzcY+q/j7QyaerOnFWnjYnvggS6tC9nr8ZQ oIfJ5dE9LKUJwsua3Y8/eHR5j5dOn5NR5zcC6jHZpIwbb2npis0btF7nN8kzaNlM 9T6X7dmapjrVIX5L4nPhkgsFmM+AozfaliI6IIzSPMlY/qfuRwQ7n0Dv43PMuaDW LOQfEE8ildhoNKCJA/UOFkCVB0rp1TW5px7JHD6T8Hc9m08ZyMf3GQunibTtVI60 UXnXrUMBiYdMM2AKVJNOY4moWTEBwq5TSEWi4dVF6cGCNK4iJIAnEryIpqpm30m0 uYmRBsRsqGdj9LW5NA0NhTxl/g== -----END CERTIFICATE-----Generated at Fri Jul 24 13:29:44 2026 by rpki-client